$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140861.roa File: AS140861.roa (raw, json) Hash identifier: qRyxs5DffsNq45Qm3kTXoWxuiWpUs077iXV/J8/TSPM= Subject key identifier: A9:2B:88:C4:37:35:75:B9:F1:52:50:5B:E8:99:8D:DF:D1:41:63:1A Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Certificate serial: 38A74F90DE47838DA712ADA6DE9EC3EC1A113A41 Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140861.roa Signing time: Wed 03 Jun 2026 07:18:37 +0000 ROA not before: Wed 03 Jun 2026 07:13:37 +0000 ROA not after: Wed 02 Jun 2027 07:18:37 +0000 asID: 140861 IP address blocks: 240e:13:809::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:26:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:a7:4f:90:de:47:83:8d:a7:12:ad:a6:de:9e:c3:ec:1a:11:3a:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Validity Not Before: Jun 3 07:13:37 2026 GMT Not After : Jun 2 07:18:37 2027 GMT Subject: CN=A92B88C4373575B9F152505BE8998DDFD141631A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c0:04:fb:da:70:1f:f0:36:49:f4:00:ef:5d: 55:8d:5c:1d:7d:10:ce:fa:8b:35:07:10:44:37:82: c0:e0:9b:fd:8b:5d:0d:47:7c:c5:51:03:8b:32:5e: df:2e:7a:a1:61:b0:fd:a1:71:5c:8c:85:79:ed:5a: d5:11:0d:19:37:c9:24:a8:20:dc:bb:c8:60:37:a0: f6:52:f8:51:4c:e8:b0:5c:35:1c:5e:50:bf:aa:ea: 6d:d2:19:fa:63:ad:23:77:54:a7:34:9a:62:41:cd: 1f:d6:30:b5:76:b0:fd:7d:c4:0b:f5:79:a3:fe:81: 46:02:62:3b:bc:5a:88:c5:a5:3e:3c:a1:22:e2:11: a0:ee:11:81:63:9d:c2:fa:dc:79:63:b1:b3:af:55: 1e:fb:5d:91:8c:39:83:70:3a:6d:8e:38:c3:8f:95: 95:3f:45:b3:8c:f2:6b:e5:d4:d9:08:7b:f8:b2:30: fb:db:08:d6:e9:76:9e:fb:12:e2:9f:b7:9a:e6:06: af:dc:89:83:4e:d5:c6:00:b0:52:2c:12:9d:4f:f6: e9:2f:52:32:01:d9:9e:c1:59:40:83:4f:0e:2a:d8: 94:dc:ac:00:b8:8f:ae:e5:ea:c8:b8:93:f8:de:d6: 26:70:ce:ba:28:4e:60:16:b5:38:e7:15:33:a9:71: 0e:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:2B:88:C4:37:35:75:B9:F1:52:50:5B:E8:99:8D:DF:D1:41:63:1A X509v3 Authority Key Identifier: keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS140861.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240e:13:809::/48 Signature Algorithm: sha256WithRSAEncryption 6a:03:56:23:4d:9e:93:33:17:18:ca:83:c8:f2:fc:59:de:d9: f4:65:86:41:f4:a8:cc:cb:89:3c:25:54:af:a5:ed:94:0e:ae: 64:b6:23:05:5f:61:4a:0e:79:9f:b3:fa:b4:41:6f:eb:78:6e: 4b:84:08:88:77:f1:c4:c6:81:e7:23:bd:25:36:a0:61:2f:44: d7:09:7d:5f:c3:f0:24:75:1d:46:21:1e:60:e3:a8:ee:86:c2: a9:98:a9:ea:bf:dd:d8:7e:ad:8d:34:48:fe:59:43:59:c2:e2: 53:12:ff:10:bd:52:16:6c:8e:a3:f7:a8:c7:19:88:aa:56:68: 1e:85:84:a8:06:bd:ff:2a:27:4f:9d:b9:c3:cc:fa:c9:19:0d: fc:0d:79:e6:c1:1f:46:b0:db:53:cd:3e:58:d9:5a:50:18:61: c5:2a:7f:25:f4:3b:e2:79:b6:1e:06:c2:e8:fe:76:06:8d:7e: ad:0d:5a:d6:2b:53:73:d8:e5:45:f8:47:bf:87:64:a6:6a:d1: ad:c5:21:1c:73:ae:f7:3c:41:a0:34:9b:e2:58:78:bd:1f:7a: f1:77:3a:de:11:96:1a:11:01:05:bf:ca:34:84:53:d4:50:a3: 76:82:5f:a7:5f:aa:86:4f:07:64:d1:e6:93:ef:fa:e7:15:5d: ef:d9:ab:f4 -----BEGIN CERTIFICATE----- MIIE9DCCA9ygAwIBAgIUOKdPkN5Hg42nEq2m3p7D7BoROkEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygxOTZGMjE4OEEz NTZEMUM0MkQzOUY2RDE2NTcxOUI1OTZCNENEOTFFMB4XDTI2MDYwMzA3MTMzN1oX DTI3MDYwMjA3MTgzN1owMzExMC8GA1UEAxMoQTkyQjg4QzQzNzM1NzVCOUYxNTI1 MDVCRTg5OThEREZEMTQxNjMxQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALHABPvacB/wNkn0AO9dVY1cHX0QzvqLNQcQRDeCwOCb/YtdDUd8xVEDizJe 3y56oWGw/aFxXIyFee1a1RENGTfJJKgg3LvIYDeg9lL4UUzosFw1HF5Qv6rqbdIZ +mOtI3dUpzSaYkHNH9YwtXaw/X3EC/V5o/6BRgJiO7xaiMWlPjyhIuIRoO4RgWOd wvrceWOxs69VHvtdkYw5g3A6bY44w4+VlT9Fs4zya+XU2Qh7+LIw+9sI1ul2nvsS 4p+3muYGr9yJg07VxgCwUiwSnU/26S9SMgHZnsFZQINPDirYlNysALiPruXqyLiT +N7WJnDOuihOYBa1OOcVM6lxDv0CAwEAAaOCAecwggHjMB0GA1UdDgQWBBSpK4jE NzV1ufFSUFvomY3f0UFjGjAfBgNVHSMEGDAWgBQZbyGIo1bRxC059tFlcZtZa0zZ HjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzEvMTk2RjIx ODhBMzU2RDFDNDJEMzlGNkQxNjU3MTlCNTk2QjRDRDkxRS5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvR1c4aGlLTlcw Y1F0T2ZiUlpYR2JXV3RNMlI0LmNlcjBeBggrBgEFBQcBCwRSMFAwTgYIKwYBBQUH MAuGQnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw NTk3NjgzNS8xL0FTMTQwODYxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJA4AEwgJMA0GCSqGSIb3DQEB CwUAA4IBAQBqA1YjTZ6TMxcYyoPI8vxZ3tn0ZYZB9KjMy4k8JVSvpe2UDq5ktiMF X2FKDnmfs/q0QW/reG5LhAiId/HExoHnI70lNqBhL0TXCX1fw/AkdR1GIR5g46ju hsKpmKnqv93Yfq2NNEj+WUNZwuJTEv8QvVIWbI6j96jHGYiqVmgehYSoBr3/KidP nbnDzPrJGQ38DXnmwR9GsNtTzT5Y2VpQGGHFKn8l9DviebYeBsLo/nYGjX6tDVrW K1Nz2OVF+Ee/h2SmatGtxSEcc673PEGgNJviWHi9H3rxdzreEZYaEQEFv8o0hFPU UKN2gl+nX6qGTwdk0eaT7/rnFV3v2av0 -----END CERTIFICATE-----Generated at Sun Jun 14 05:17:42 2026 by rpki-client